Cheat Engine

[Polynomial]

I'm working on some code to help secure released .NET applications against disassembly. I'm already using smartassembly for obfuscation and modification protection. I've also implemented tests to make sure the binary is signed, as well as checks using RSA to make sure that the binary remains unmodified.

What I want to do is implement some (albeit primitive) protection routines to make it a little harder for casual debuggers to crack. I've read good things about VirtualProtect, but can't find any samples that would protect the code region of the process in-memory. For a start, I don't know how to find the pointer to the start of the code section, let alone how to identify a code section at runtime.

Another question: would calling IsDebuggerPresent work at all with a .NET process? I know it can be patched simply using something like OllyDbg, but it's another thing for the person to think about.

[iPromise]

heres a example

[Polynomial]

I know how to call the API, just not how to determine the address I want to protect. I want to run VirtualProtect all the way over my code section in-memory so that modifications are made more difficult.

[iPromise]

use virtualquery() to find your regions, if your looking for MEM_PRIVATE pages, you can specify that and protect those addies.

example